SPF Basic Setup
From: https://support.google.com/a/answer/10684623?
sjid=16475661690433716483-NC
Define your SPF record—Basic setup
Protect against spoofing & phishing, and help prevent messages from being
marked as spam
Who this article is for
This article is for people who don't have experience setting up Sender
Policy Framework (SPF) or email servers. This article includes standard SPF
records for sending email with Google Workspace only, or for Google Workspace
plus your other email senders. For advanced, technical information about SPF,
including SPF record requirements, SPF record syntax, and how SPF affects email
delivery, go to Define your SPF record—Advanced setup.
An SPF record identifies the mail servers and domains that are allowed to send
email on behalf of your domain. Receiving servers check your SPF record to
verify that incoming messages that appear to be from your organization are sent
from servers allowed by you.
Domains can have one SPF record. However, the SPF record for a domain can
specify multiple servers and third parties that are allowed to send mail for the
domain.
Video:
Set up SPF by adding a DNS TXT record at your domain provider.
SPF record: Google Workspace only
If all email from your organization is sent using Google Workspace only,
copy this line of text for your SPF record:
v=spf1 include:_spf.google.com ~all
Next steps
Go directly to the next step, Add your SPF record at your domain provider.
SPF record: Google Workspace plus other
senders
If you send mail with other servers or third-party services in addition to
Google Workspace, create a custom SPF record that authorizes these senders. If
you’re not sure what these services are, review Identify all email senders for
your organization, in Before you set up SPF.
Your SPF record should include a reference to Google Workspace, and to the
domains and IP addresses of all servers or services that send mail for your domain.
Example SPF records: Google Workspace plus other senders
Here are example SPF records for common email setups that use Google Workspace
and other senders. Every example includes _spf.google.com, which is required to
send mail with Google Workspace.
Start with this SPF record for Google Workspace, then add the information for
your other senders:
v=spf1 include:_spf.google.com ~all
Important: The IP addresses and domain names used in this table are examples.
Replace them with IP addresses and domains for your senders.
Example SPF record | Description
|
v=spf1 ip4:192.168.0.0/16 include:_spf.google.com ~all
| Authorizes these email senders for your domain:
- Any server with an IP address between 192.168.0.0 and 192.168.255.255
- Google Workspace
|
v=spf1 ip4:192.168.0.0/16 include:_spf.google.com include:sendyourmail.com ~all
| Authorizes these email senders for your domain:
- Servers between 192.168.0.0 and 192.168.255.255
- Google Workspace
- Third-party service Sendyourmail
|
v=spf1 a:mail.solarmora.com ip4:192.72.10.10 include:_spf.google.com ~all
| Authorizes these email senders for your domain:
- Server mail.solarmora.com
- Server with IP address 192.72.10.10
- Google Workspace
|
v=spf1 include:servers.mail.net include:_spf.google.com ~all
| Authorizes these email senders for your domain:
- Third-party email service with server servers.mail.net
- Google Workspace
|
Next steps
After you’ve created the SPF record for your domain, add your SPF record at your
domain provider.